Hello tareq,
use the restricted group
make mydomain\Domain users members of the "Administrators" group.
Take care of the way you do it, else it will empty the local group before appending domain users.
The GPO is computer based
Regards,
Mathieu CHATEAU
http://lordoftheping.blogspot.com
Thursday, August 24, 2006, 4:13:59 PM, you wrote:
|
> |
dears, How i can build a group policy that permit normal account in the active directory to login as Local Admin for any computer in one OU.
tareq
All-new Yahoo! Mail - Fire up a more powerful email and get things done faster. |
